Skip to main content

Always-On · Network Edge

DDoS protection at the network edge

L3/L4 scrubbing included free with all dedicated servers and VPS. Traffic is inspected before it reaches your server — zero config required. L7 application-layer protection available as an add-on.

Get Protected
  • Always-OnZero config
  • L3/L4/L7Coverage
  • < 1msLatency overhead
  • TbpsMitigation scale
  • FreeWith all servers

Network-level L3/L4

Volume and protocol attacks filtered at the edge router before entering the DC. SYN floods, UDP amplification, ICMP floods.

Free with every service

No separate subscription. Every dedicated server, VPS, and colocation customer gets L3/L4 scrubbing at no extra cost.

L7 Application Layer (add-on)

HTTP flood mitigation, bot detection, rate limiting. Scope is confirmed with the order — no public rate card.

Anycast scrubbing

Traffic is attracted to our nearest scrubbing center and clean traffic is tunneled back to your server.

Automated detection

BGP FlowSpec rules triggered automatically within seconds of attack onset. Manual escalation path available.

Attack visibility

Traffic graphs and attack summaries in your customer portal. Forensic data available on request for compliance.

DDoS FAQ

  • 01Is DDoS protection included with all plans?

    L3/L4 network-level scrubbing is included at no extra cost with all dedicated servers, VPS, and colocation services. L7 application protection is an add-on.

  • 02What attack sizes can you handle?

    Our scrubbing capacity handles attacks up to several Tbps. For extremely high-volume attacks, we coordinate with upstream providers for blackholing.

  • 03What's the mitigation latency?

    Less than 1ms added latency for clean traffic. Attacked traffic is detected and filtered at the BGP edge before reaching your server.

  • 04Do you send alerts during attacks?

    Yes. Attack notifications are sent via email. Detailed attack statistics are available in the customer portal during and after mitigation.

DDoS hardened infrastructure

All services include network-level protection. No separate subscription, no surprise bills.